Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
File:                     G395gdniwsMPbyw0hxophthfiQ4.mft (raw, json)
Hash identifier:          wDhx04aQCFFV1jqNfpqUdjHc9kEgq9iFLBdUOY/HAFk=
Subject key identifier:   2E:73:6C:1B:88:80:89:B7:5C:0C:F3:D6:B7:BD:26:A6:6F:91:3B:01
Authority key identifier: 1B:7F:79:81:D9:E2:C2:C3:0F:6F:2C:34:87:1A:29:86:D8:5F:89:0E
Certificate issuer:       /CN=A9170AE9/serialNumber=1B7F7981D9E2C2C30F6F2C34871A2986D85F890E
Certificate serial:       04C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
Manifest number:          04BC
Signing time:             Thu 30 Jan 2025 23:55:00 +0000
Manifest this update:     Thu 30 Jan 2025 23:54:59 +0000
Manifest next update:     Thu 06 Feb 2025 23:54:59 +0000
Files and hashes:         1: G395gdniwsMPbyw0hxophthfiQ4.crl (hash: 3YVr4Vlgz/+1O0hmY52FFnmcLTLPXKGv4fi1fe7JNhA=)
                          2: 5D7779A6108A11EC9E1F3D49C4F9AE02.roa (hash: PZxJfjzjdyZlmOEk3GHkckfVyABUkJWbSsSKrjPn2qY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1216 (0x4c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170AE9/serialNumber=1B7F7981D9E2C2C30F6F2C34871A2986D85F890E
        Validity
            Not Before: Jan 30 23:54:59 2025 GMT
            Not After : Feb  6 23:54:59 2025 GMT
        Subject: CN=679c1153-2690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:17:f9:c1:8a:4c:35:77:53:8c:04:fc:43:01:
                    50:70:5f:f5:84:79:98:e1:c0:d2:17:16:19:e3:b8:
                    19:f6:32:97:09:c1:5a:f5:25:a5:71:0b:dc:ce:95:
                    0b:c1:4a:3d:31:cd:16:a1:07:84:eb:3a:1e:60:e9:
                    7d:29:24:db:8a:ca:69:cc:d6:80:ef:00:e4:94:b1:
                    9c:48:d3:79:7f:3d:28:4d:1c:34:2b:08:d5:b3:0b:
                    04:3e:c8:83:41:40:ac:1c:c0:ec:b4:ce:23:f3:7f:
                    b4:b2:12:c3:37:31:96:65:b7:9f:87:65:d5:93:98:
                    33:1a:c5:7a:7b:db:81:e0:41:a5:83:3e:d7:b8:87:
                    ff:66:0b:6c:a1:3c:d2:f2:f8:07:3d:5c:0f:0e:a2:
                    c7:62:06:a3:9e:46:a3:9f:38:ae:f2:16:83:f9:ac:
                    93:94:e6:51:b2:55:05:ca:19:5f:7e:da:6c:6d:71:
                    ca:14:0f:69:dd:ac:40:8c:a3:46:b7:49:07:79:97:
                    a4:38:a8:e1:74:90:88:18:15:f5:45:17:eb:53:f2:
                    15:4e:5c:9e:40:ba:ca:11:60:9d:62:d2:b1:a5:d0:
                    a2:55:62:b6:c9:c1:00:7d:26:45:ce:27:73:5d:02:
                    35:e6:bd:1f:79:65:ff:36:87:95:7a:80:94:92:ee:
                    0c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:73:6C:1B:88:80:89:B7:5C:0C:F3:D6:B7:BD:26:A6:6F:91:3B:01
            X509v3 Authority Key Identifier:
                keyid:1B:7F:79:81:D9:E2:C2:C3:0F:6F:2C:34:87:1A:29:86:D8:5F:89:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:be:24:4f:31:88:3c:d9:93:8e:16:6d:b5:ad:2e:b8:51:04:
         04:be:36:b3:5e:f5:6e:c7:f6:33:94:32:8a:ee:ca:36:1a:98:
         38:d1:d2:00:b1:01:62:8b:bd:8b:16:7c:91:96:7b:57:14:df:
         21:d5:14:9e:79:e5:e1:19:e4:9e:e5:43:ea:14:9f:de:c6:78:
         87:ad:73:7e:7b:42:89:02:97:72:ce:84:df:97:46:88:a9:ac:
         71:e3:d9:cb:2d:b3:0b:3a:d8:9d:34:66:8f:db:02:d7:24:1c:
         c7:5c:8f:a2:b7:29:a8:f6:6a:2a:b2:7b:cf:1d:4a:2d:22:0d:
         3a:93:89:12:f8:46:e2:8e:4d:a8:fa:54:e5:c5:e9:38:b6:ea:
         fc:54:e6:85:60:cb:59:92:a4:90:01:d7:57:65:ef:02:e1:ac:
         bd:4e:c1:9d:d0:e6:20:85:f9:2c:4b:6c:10:86:b2:c8:98:32:
         5b:64:46:ae:4f:62:23:c1:e1:b2:06:9f:3b:55:97:65:b5:66:
         3f:37:4c:ce:bb:91:ac:d9:0e:0e:26:da:3f:17:61:a7:bf:be:
         8e:ab:79:82:bf:e6:2e:da:34:d6:50:0c:4d:6a:17:00:13:69:
         4e:3d:1a:a3:11:f3:6b:20:46:67:e9:d7:5a:08:a2:4f:40:79:
         5d:48:1d:40
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzBBRTkxMTAvBgNVBAUTKDFCN0Y3OTgxRDlFMkMyQzMwRjZGMkMzNDg3MUEyOTg2
RDg1Rjg5MEUwHhcNMjUwMTMwMjM1NDU5WhcNMjUwMjA2MjM1NDU5WjAYMRYwFAYD
VQQDEw02NzljMTE1My0yNjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyBf5wYpMNXdTjAT8QwFQcF/1hHmY4cDSFxYZ47gZ9jKXCcFa9SWlcQvczpUL
wUo9Mc0WoQeE6zoeYOl9KSTbisppzNaA7wDklLGcSNN5fz0oTRw0KwjVswsEPsiD
QUCsHMDstM4j83+0shLDNzGWZbefh2XVk5gzGsV6e9uB4EGlgz7XuIf/ZgtsoTzS
8vgHPVwPDqLHYgajnkajnziu8haD+ayTlOZRslUFyhlfftpsbXHKFA9p3axAjKNG
t0kHeZekOKjhdJCIGBX1RRfrU/IVTlyeQLrKEWCdYtKxpdCiVWK2ycEAfSZFzidz
XQI15r0feWX/NoeVeoCUku4MowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5zbBuI
gIm3XAzz1re9JqZvkTsBMB8GA1UdIwQYMBaAFBt/eYHZ4sLDD28sNIcaKYbYX4kO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEFFOS8wOTEyMDM4MDEw
ODYxMUVDODFFNzcwM0ZDNEY5QUUwMi9HMzk1Z2RuaXdzTVBieXcwaHhvcGh0aGZp
UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0czOTVnZG5pd3NNUGJ5dzBoeG9waHRoZmlRNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MEFFOS8wOTEyMDM4MDEwODYxMUVDODFFNzcwM0ZDNEY5QUUwMi9HMzk1Z2RuaXdz
TVBieXcwaHhvcGh0aGZpUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCEviRPMYg82ZOOFm21rS64UQQEvjazXvVux/YzlDKK7so2Gpg40dIA
sQFii72LFnyRlntXFN8h1RSeeeXhGeSe5UPqFJ/exniHrXN+e0KJApdyzoTfl0aI
qaxx49nLLbMLOtidNGaP2wLXJBzHXI+itymo9moqsnvPHUotIg06k4kS+Ebijk2o
+lTlxek4tur8VOaFYMtZkqSQAddXZe8C4ay9TsGd0OYghfksS2wQhrLImDJbZEau
T2IjweGyBp87VZdltWY/N0zOu5Gs2Q4OJto/F2Gnv76Oq3mCv+Yu2jTWUAxNahcA
E2lOPRqjEfNrIEZn6ddaCKJPQHldSB1A
-----END CERTIFICATE-----